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DETAILED ACTION 

This action is in response to the papers filed 12/12/2003. Claims 1-35 were 
received for consideration. No preliminary amendments for the claims were filed. 
Currently claims 1-35 are under consideration. 

Claim Rejections - 35 USC § 101 

35 U.S.C. 101 reads as follows: 

Whoever invents or discovers any new and useful process, machine, manufacture, or composition of 
matter, or any new and useful improvement thereof, may obtain a patent therefor, subject to the 
conditions and requirements of this title. 

Claims 18-35 are rejected under 35 U.S.C. 101 because the claim invention is 
directed to non-statutory subject matter. With the respect to claim 18-26, are apparatus 
claims whose 'means' are described in the specification as software (page 12 line 30 - 
page 13 line 5). Software by itself is not statutory. A claim to a data structure, per se, or 
other functional descriptive material, including computer programs, per se; is not patent 
eligible subject matter. This is exemplified in In re Warmerdam 31 USPQ2d 1754 where 
the rejection of a claim to a disembodied data structure was affirmed. Functional 
descriptive material claimed in combination with an appropriate computer readable 
medium to enable the functionality to be realized is patent eligible subject matter if it is 
capable of producing a useful, concrete and tangible result when used in the computer 
system. Compare Warmerdam to In re Lowry 32 USPQ2d 1031 where a memory with a 
data structure that increased computing efficiency was patentable. 

With the respect to claim 27-35, the "computer readable medium," according to 
the specification may be "hard-wired medium such as exemplified in the Internet 
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system, or wireless medium such as exemplified in the GSM mobile telephone system". 
This subject matter is not limited to a process, machine, manufacture, or a composition 
of matter. Instead, it includes a form of energy. Energy does not fall within a statutory 
category since it is clearly not a series of steps or acts to constitute a process, not a 
mechanical device or combination of mechanical devices to constitute a machine, not a 
tangible physical article or object which is some form of matter to be a product and 
constitute a manufacture, and not a composition of two or more substances to constitute 
a composition of matter. 

Claim Rejections - 35 USC § 102 

The following is a quotatipn of the appropriate paragraphs of 35 U.S.C. 102 that 
form the basis for the rejections under this section made in this Office action: 

A person shall be entitled to a patent unless - 

(b) the invention was patented or described in a printed publication in this or a foreign country or in public 
use or on sale in this country, more than one year prior to the date of application for patent in the United 
States. 

Claim 1-5, 10-12, 15, 18-22, 26-31 and 35 rejected under 35 U.S.C. 102(a) as 
being anticipated by Guski et al. (U.S. Patent # 5,592,553). Guski teaches everything 
with respect to claims 1,18 and 27, a method of generating a password for at least one 
application using a single key, said method comprising the steps of: receiving said 
single key (see figure 3 element 306 and column 6 lines 20-41); receiving a first 
application name associated with a first application (see figure 3 element 304 and 
column 6 lines 20-41); and generating a first password for said first application, based 
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on at least said single key and said first application name (see figure 3 element 310 and 
column 6 lines 20-41). 

With respect to claims 2, 19 and 28, receiving a second application name 
associated with a second application; and generating a second password for said 
second application, based on said single key and said second application name (see 
column 6 lines 20-41 and column 8 line 26 - column 9 line 21 i.e. it's inherent to 
generate multiple passwords because the generator takes the application ID and 
different application ID gives you different password). 

With respect to claims 3, 20 and 29, receiving a time period; wherein generating 
said first password is further based on said time period (see figure 3 element 308 and 
column 6 lines 20-41). 

With respect to claims 4, 21 and 30, receiving first password constraints for said 
first password; wherein generating said first password is further based on said first 
password constraints (see column 8 line 26 - column 9 line 21 ). 

With respect to claims 5, 22, and 31 , wherein generating said first password 
utilises at least one encryption technique selected from the group of encryption 
techniques consisting of Block Addition, International Data Encryption Algorithm (IDEA), 
BLOWFISH, Software-optimized Encryption Algorithm (SEAL), RC4, Data Encryption 
Standard (DES), and RSA (see column 8 lines 53-67). 

With respect to claim 10, wherein said first application is selected from the group 
of applications consisting of bank account, Internet email account, Internet website, and 
computer account (see column 1 lines 16-29). 



Application/Control Number: 10/734,846 Page 5 

Art Unit: 2132 

With respect to claim 1 1 , a method of generating a password for a plurality of 
applications using a single key (see column 6 lines 20-41 and column 8 line 26 - 
column 9 line 21 i.e. it's inherent to generate multiple passwords because the generator 
takes the application ID and different application ID gives you different password), said 
method comprising the steps of: receiving a single key (see figure 3 element 306 and 
column 6 lines 20-41); receiving a first application name associated with a first 
application (see figure 3 element 304 and column 6 lines 20-41); generating a first 
password for said first application, based on at least said single key and said first 
application name (see figure 3 element 310 and column 6 lines 20-41); receiving a 
second application name associated with a second application; and generating a 
second password for said second application, based on at least said single key and said 
second application name (see column 6 lines 20-41 and column 8 line 26 - column 9 
line 21 i.e. it would have been obvious that changing the application name would 
change the password). 

With respect to claim 12, receiving first password constraints for said first 
application; wherein generating said first password is further based on said first 
password constraints (see column 8 line 26 - column 9 line 21). 

With respect to claim 15, receiving second password constraints for said second 
application; wherein generating said second password is further based on said second 
password constraints (see column 7 line 58 - column 8 line 6). 
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Claim Rejections - 35 USC § 103 

The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set 
forth in section 102 of this title, if the differences between the subject matter sought to be patented and 
the prior art are such that the subject matter as a whole would have been obvious at the time the 
invention was made to a person having ordinary skill in the art to which said subject matter pertains. 
Patentability shall not be negatived by the manner in which the invention was made. 

Claim 6-9, 13, 14, 16, 17, 23-26, 32-35 rejected under 35 U.S.C. 103(a) as being 

unpatentable over Guski et al. (U.S. Patent # 5,592,553) in view of well-known practices 

in the art. Guski teaches everything with respect to claim 1,18 and 27 above but does 

not teach with respect to claims 6, 23 and 32, generating a first userid for said first 

application, based on at least said single key and said first application name. It is well 

known in the art that generating a first userid for said first application, based on at least 

said single key and said first application name and Official Notice is taken. Guski 

already teaches generating a password based on single key and said first application 

name (see figure 3 element 310 and column 6 lines 20-41). It would have been obvious 

at the time the invention was made to a person having ordinary skill in the art to which - 

said subject matter pertains to have generated a unique ID for an application based on 

a key and an application name to make it harder for a third party to intercept and guess 

the user ID. Therefore one would have been motivated to have included generating a 

user ID. 

With respect to claims 7, 24 and 33, receiving a first userid time period; wherein 
generating said first userid is further based on said time period (see figure 3 element 
308 and column 6 lines 20-41 ). 
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With respect to claims 8, 25 and 34, receiving first userid constraints for said first 
userid; wherein generating said first password is further based on said first userid 
constraints (see column 7 line 58 - column 8 line 6 and column 8 line 26 - column 9). 

With respect to claims 9, 26, and 35, wherein generating said first password 
utilises at least one encryption technique selected from the group of encryption 
techniques consisting of Block Addition, International Data Encryption Algorithm (IDEA), 
BLOWFISH, Software-optimized Encryption Algorithm (SEAL), RC4, Data Encryption 
Standard (DES), and RSA (see column 6 lines 20-34). 

With respect to claim 13, generating a first userid for said first application based 
on at least said single key and said first application name (see Smithies column 18 lines 
5-14). 

With respect to claim 14, receiving first userid constraints for said first 
application; wherein generating said first userid is further based on said first userid 
constraints (see column 7 line 58 - column 8 line 6 and column 8 line 26 - column 9). 

With respect to claim 16, generating a second userid for said second application 
based on at least said single key and said second application name (see Smithies 
column 18 lines 5-14). 

With respect to claim 17, receiving second userid constraints for said second 
application; wherein generating said second userid is further based on said second 
userid constraints (see column 7 line 58 - column 8 line 6 and column 8 line 26 - 
column 9). 
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Conclusion 



Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Devin Almeida whose telephone number is 571-270- 
1018. The examiner can normally be reached on Monday-Thursday from 7:30 A.M. to 
5:00 P.M. The examiner can also be reached on alternate Fridays from 7:30 A.M. to 
4:00 P.M. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Gilberto Barron, can be reached on 571-272-3799. The fax phone number 
for the organization where this application or proceeding is assigned is 571-273-8300. 

Information regarding the status of an application may be obtained from the 
Patent Application Information Retrieval (PAIR) system. Status information for 
published applications may be obtained from either Private PAIR or Public PAIR. 
Status information for unpublished applications is available through Private PAIR only. 
For more information about the PAIR system, see http://pair-direct.uspto.gov. Should 
you have questions on access to the Private PAIR system, contact the Electronic 
Business Center (EBC) at 866-217-9197 (toll-free). 




Devin Almeida 
Patent Examiner 
2/7/2007 




